This Privacy Policy explains how Costimizer (with respect to legal entity identification, see Determining the Data Controller and Processor) collects, processes, distributes, stores, and secures information related to an identified or identifiable person (Personal Data) in connection with its services, websites, and other interactions.

It outlines your rights and options as well.

We can be contacted with any questions or concerns.

1. Applicability of this Privacy Policy

This Privacy Policy concerns:

The cloud cost-optimization software, platform, and associated services (the Services) of Costimizer, including its web, desktop, and mobile interfaces.

• The Web properties (e.g, costimizer.ai) and the Costimizer site (e.g., costimizer.ai).
• Other contacts with Costimizer (customer support, marketing, events, etc.).

You are not in agreement with this Policy, then do not access or use the Services or Websites.

Unless otherwise stated, this Privacy Policy does not apply to third-party applications or services that integrate with Costimizer. Their terms and privacy practices will be those of the third parties.

Costimizer offers functionality (e.g., workspace-level settings, integrations, and access controls) to enable customers (i.e., organizations using Costimizer) to define privacy, visibility, and sharing settings. Questions regarding those settings should be addressed to the administrator of your organization.

2. Information We Collect

We gather and obtain two general types of information:

2.1 Customer / Workspace Data

In the case of an organization (Customer) using Costimizer, authorized users can upload, submit, or provide data through the Services (Customer Data). This may include:

• Cloud billing information, usage history, and expense statements.
• Metadata, configuration, tagging, resource information.
• Working environment, user assignments, access controls
• Reports, optimization suggestions, alerts, logs.

The Customer is in control of Customer Data (see below, Identifying Controller / Processor).

2.2 Other Information (Collected / Generated)

Besides Customer Data, we gather Other Information in several different ways:

Account & Workspace Info

To create or manage a workspace, we require information including your name, email address, phone number, organization, domain, billing address, payment information (where applicable), and credentials.

Metadata

We capture user interaction with the Services, including which dashboards users view, the features used, frequency, duration of sessions, and metadata related to the service.

Log Data

We capture technical logs, including IP address, browser type, operating system, timestamps, referrer, and device/browser configuration.

Device / System Info

Details about the device (OS version, device identifiers where applicable, crash reports, and telemetry) can be gathered, depending on the device's permissions.

Location Data

We can deduce the approximate location based on the IP address or the address information provided by the Customer.

Cookies

Cookies, web beacons, local storage, scripts, and other technologies are some of the ways that we (and our analytics and tracking providers) gather data on how you use our Websites and Services.

Third-Party Integrations and Services

When you or your Customer activate third-party integrations (e.g., cloud accounts, connectors, plugins), we might get data provided by or provide data to those third parties (within the permissions established by the Customer).

Contact / Communication Data

When you contact us (through email, form, or support), we collect your name, email address, the content of the message, and any other information you provide.

Additional Info & Feedback

Whenever you post a comment, fill out a survey, apply for a job, participate in an event, or otherwise communicate with us, we store whatever information you provide.

3. How We Use Your Information & Legal Basis

3.1 Customer Data:

Costimizer acts on Customer Data pursuant to Customer Instructions. We are a processor, and Customers are the controllers of their data (see "Identifying Controller / Processor).

We use Customer Data to:

Offer and perform the Services.

• Create reports, dashboards, and analytics.
• Troubleshooting, debugging, and performance.
• Add capabilities such as alerts, notifications, and recommendations.
• Adhere to workspace-level settings (visibility, access)

3.2 Other Information

We use Other Information for:

Legal requirements

To act in response to legal demands (e.g., subpoenas, regulatory investigations), enforce agreements, or defend rights.

Legitimate interests

Other Information may be used when it is proper, respecting the rights of users, in the following ways:

• Operate, maintain, and improve Services.
• Enhance functionality, conduct in-house analytics.
• Give suggestions, customize user experience.
• Identify fraud, abuse, and security threats.
• Track usage trends of the monitors.
• Get in touch with you (service notices, updates)
• Billing, administration, and account management.
• Promotional and marketing messages (with permission)

Consent

In specific applications (e.g., marketing, cookie analytics), we can utilize user consent, as mandated by the relevant legislation.

4. How We Share & Disclose Information

We can share or disclose information under the following circumstances:

Customer instructions. We do as the Customer asks us to do.

• Feature visibility / Workspace. Specific data can be visible or shared among workspace members, based on settings (e.g., user profile names, usage, alerts).
• Service providers of the third party. We have vendors (hosting, analytics, support, email, etc.) who process data on our behalf under confidentiality agreements.
• Third-party integrations. We can provide data with permission to facilitate integrations (e.g., cloud provider, alerting tools).
• Forums, community, events. Information that you post will be publicly visible (e.g., in forums) or shared with event sponsors (with your permission).
• Corporate affiliates. We can share with parent/subsidiary entities under standard privacy settings.
• Business transfers. Data can be transferred to new owners under confidentiality terms in the event of a merger, acquisition, sale, or reorganization.
• Aggregated/deidentified data. We can provide anonymized or aggregated data for analytics, benchmarking, and research purposes.
• Legal / safety. We can report to the police, the authorities, or to safeguard rights, safety, or property.

5. Data Retention

Customer Data. Customer data is stored according to the Customer's instructions or workspace configuration. We delete or anonymize Customer Data related to the Customer when the Customer requests deletion, provided that this is in accordance with applicable legal requirements.

Other Information. Other Information is stored as needed to serve the purposes mentioned (e.g., analytics, logs, legal requirements). Once we no longer need data, we destroy, consolidate, or anonymize it.

6. Security

We take commercially reasonable technical and organizational measures to protect Personal Data, based on its nature and the relevant threats. Examples include:

• Encryption in transit (TLS)
• At rest (where applicable) encryption.
• Role-based permissions, access controls.
• Audit monitoring and audit logging.
• Periodic security audits and hacks.
• Breach notification and incident response processes.

No system is entirely safe, even in our best attempts. When you use external links, information can be transferred to other third-party websites over which we have no control.

7. Age Limitations

Costimizer does not permit persons under 16 years of age to use the Services or Websites, to some extent. In case you think that someone underage has given us information, contact us, and we will act to remove it.

8. Changes to This Privacy Policy

This Privacy Policy may be updated over time (e.g., to comply with new laws or features). We will provide notice when the changes are material (e.g., via email, in-app notification). We invite you to read periodically. Further use of the Services following the changes constitutes acceptance.

9. International Data Transfers

Since our Services and infrastructure are global, your Personal Data can be transferred to, stored in, or processed in countries other than your own (e.g., the United States, India).

To secure data in transfer, we employ:

• Standard Contractual Clauses (SCCs) or other transfer protection.
• Proper security and compliance.
• Local laws on cross-border transfers.

We can also rely on the APEC Cross-Border Privacy Rules or domestic privacy laws, as necessary.

10. Find Data Controller and Processor

In jurisdictions where the terms controller and processor are different:

• Customer (organization using Costimizer) is the controller of Customer Data. They determine how Customer Data is collected, used, and shared.
• Costimizer acts as processor of Customer Data, handling it strictly per Customer’s instruction and this Privacy Policy.
• Costimizer is the controller of Other Information (account info, usage logs, metadata).

The legal entity of Other Information (for example, registered in India / USA / other) is the costimizer, which is subject to the jurisdictional law (fill in legal entity, address, and registration details here).

11. Your Rights

You might have rights over your Personal Data, including (where applicable):

• Right to access or receive a copy.
• Right to correct or update
• Right to delete or erase
• Right to object or to restrict processing.
• Right to data portability (export in a machine-readable form)
• Right to withdraw consent.
• Right to oppose profiling or automatic decision-making.

To exercise these rights, please contact us at contact@costimizer.ai. We can verify your identity before responding to requests. Legal requirements or exceptions may restrict some of the rights.

12. Data Protection Authority / Supervisory Authority

Where permitted by applicable laws, you may also make a complaint to your local data protection authority or supervisory body (e.g., in the EU, the Information Commissioner's Office in the UK, etc.). We would like you to call us first, and we will clear your worry.

13. Contacting Costimizer

You can contact us:

Through Email: contact@costimizer.ai.

Postal Addresses:

India: A-80, Lower Basement, A Block, Sector 2, Noida, Uttar Pradesh 201301, India.

United States: Melodia Circle, Dublin, CA 94568, United States.

We will act within a sensible time, in accordance with the relevant laws.

Acknowledgement / Consent

Using or visiting the Services or Websites, you agree that you have read and accepted this

Privacy Policy and give your consent to our collection, usage, and processing of Personal Data as outlined in this Privacy Policy.